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-Abstract- 

We describe a strategy-based approach to teaching natural deduction using a notation that em¬ 
phasises the order in which deductions are constructed, together with a package and Java 

app to aid in the production of teaching resources and classroom demonstrations. Our approach 
is aimed at students with little exposure to mathematical method and has been developed while 
teaching undergraduate classes for philosophy students over the last ten years. 


1998 ACM Subject Classification K.3.1 Computer Uses in Education 


Keywords and phrases Natural deduction, strategy, proof assistant 


[T] Natural Deduction as a Creative Process 


Teaching modern logic to students with little background in mathematics is notoriously 
hard. The philosophy student, adept at reading complex prose and composing artful essays 
is usually not well prepared for manipulating symbols and constructing rigorous proofs of 
theorems. Acquisition of at least the following three skills are needed. 

The first is using the language of propositional and predicate logic to represent one’s thoughts 
in formal notation and understand what has been written by others. This is usually achieved 
by learning to translate to and from natural language. Many resources are available. 

The second is manipulating the symbols of formal notation according to precise rules. This is 
a basic skill necessary for almost all of logic, from applying mechanical methods of argument 
evaluation to acquiring an appreciation of the autonomy of the syntactic realm, without 
which the major theoretical results of logical theory cannot be understood. It can be acquired 
by learning how to produce truth tables, truth trees, and in many other ways. Again many 
resources are available. 


The third is reading and writing rigorous arguments, of the kind used in mathematics. This 
is a much more difficult skill to acquire, requiring mastery of the first two skills, and in 
addition, a level of mathematical maturity that is attained by mathematics students only 
after years of practice with algebra, geometry, analysis, etc. Consequently, this side of logic 
education is often neglected by philosophy undergraduate programmes. Although many 
introductory textbooks include some discussion of logical theory, such as soundness and 
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completeness, the emphasis is on understanding the theorems rather than developing the 
skills to prove them. Few are aimed directly at acquiring the skill of creating proofs from 
scratch Q 

One solution is to require logic students to take a substantial number of courses in mathem¬ 
atics, so that they acquire the necessary skills in the same way as mathematics students. In 
the long run, a broad experience with mathematical methods is certainly useful for research 
in logic, if not absolutely essential. But the huge gap that must be filled is daunting and 
dispiriting for most philosophy students, most of whom decide that it is just too big to 
breach. 

Is there another solution? The obvious candidate is to teach students the skill of rigorous 
argumentation using the very formalisms that they have already learned: propositional 
and predicate logic. From a theoretical perspective, we know that our various systems of 
deduction can duplicate all that a mathematics student learns by a much more indirect and 
less explicit route. Why then is it so difficult for a philosophy student who has learned a 
formal system of deduction to transfer her skills to the production of informally rigorous 
arguments of the kind needed for progress in her subject? 

It is generally recognised that axiomatic systems, while elegant and theoretically parsimo¬ 
nious, are wholly inappropriate for learning deduction. Instead, most logic programmes for 
philosophy students include some system of natural deduction, in which axioms are replaced 
by rules which mirror patterns of reasoning used in natural language argumentation. In 
the classic approach of Irving Copi, numerous rules are added, so as capture as many such 
patterns as possiblej^ Yet there is often an insufficient level of attention to any systematic 
discussion of the process of creating deductions. Typically, students are given an introduc¬ 
tion to the rules, motivated by their natural language correlates, a few examples of complete 
deductions, and are then left to fend for themselves on a large number of exercises, with the 
hope that they will develop their own strategies by trial and error. 

An alternative is to teach the strategies of creation explicitly. As well as helping students to 
learn formal deduction, these are the strategies that will prepare the student for the harder 
task of creating rigorous informal arguments of the kind needed to do postgraduate work in 
logic, and which mathematics students learn implicitly through their application to a wide 
range of mathematical topics. Teachers of natural deduction in the traditional style may 
be fully aware of this point, but the effective learning of explicit strategy is made almost 
impossibly hard by several factors. 

The first is simply the number of rules used by logic textbooks aimed at mirroring patterns 
in informal reasoning, which include both proof by cases (Disjunction Elimination, VE), 
and Disjunctive Syllogism, if not also Constructive Dilemma. While each of these is relat¬ 
ively easy to explain in isolation, the more rules, the harder it is to master their strategic 
interactions, which the student must consider when creating her own deductions. 

A second, related factor is the lack of structure to the set of rules. From the perspective 
of teaching strategy, one would prefer a simpler set of rules, organised in a way that cor- 


^ A notable exception is “How to Prove it: A Structured Approach ” 015]. There are also countless 
introductions to mathematical method, e.g. “The Nuts and Bolts of Mathematical Proof" [5], “How to 
Read and Do Proofs: An Introduction to Mathematical Thought Processes” [3|. 

^ “Introduction to Logic" [T] is now in its 14th edition. Many other textbooks on natural deduction 
employ a similarly lengthy list of rules. 
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responds to patterns of use in the creation of deductions, and exactly this is provided by 
Gentzen’s original system, which uses the idea of introduction and elimination to expose 
the structure and symmetry of proof. There is no room here to explain and justify this 
choice, so we will just mention a few relevant points. Firstly, the fact that the intuitionistic 
fragment of the system has only a pair of rules for each logical operator allows one to develop 
general strategies: one for Introduction rules and one for Elimination rules, concerning the 
management of resources and simplification of goals. Moreover, an orthogonal classification 
of rules allows us to distinguish between cases in which a choice is required (e.g., Vl and 
31) and those that are ‘automatic’, in the sense that they can be applied without the need 
for further choice. Even the symmetry-breaking oddity of the non-intuitionistic rule 
which can be applied to any conclusion, raises an important strategic question: how to man¬ 
age the creative steps of deduction? And this leads to an explicit discussion of back-tracking 
in problem solving and the need to recognise dead-ends. While such matters of strategy are 
implicit in more complicated systems, they are highlighted in systems in which the number 
of rules is small and well-balanced. 

Standard presentations of Gentzen-style natural deduction, such as those of Fitch or Lemon, 
still have an important deficiency. Designed for reading rather than writing, the argument 
is displayed with the premises at the top, the conclusion at the bottom and with each line 
justified by lines higher up on the page, according to a formal rule. This makes the process 
of checking the correctness of the deduction relatively easy, but the process of generating 
the deduction itself unnecessarily hard. 


1. 

(-P V -.q) 

Prem 

On the left is a correct deduction using a 

2. 

{pAq) 

Ass 

version of Gentzen’s rules. Hypothetical 

|—3. 

-P 

Ass 

reasoning is indicated by marking the as- 

4. 

P 

2, AE 

sumption (Ass ) and a vertical bracket end- 

5. 

T 

3,4,^E 

ing below the hypothetical conclusion. The 

|—6. 

-q 

Ass 

symbol T is used to mark a contradiction. 

7. 

q 

2, AE 


8. 

T 

6,7,^E 


9. 

T 

1,3-5,6-8, VE 


10. 

-(P A q) 

2-9, M 



Information about the process of creating the deduction is lost in this representation, which 
wrongly suggests that it was written from top to bottom, starting with the premises and 
ending in the conclusion. (One of the most common mistakes made by students is to follow 
this order.) There is no record of the strategies used to construct the deduction; no record 
even of the order in which it was constructed. The student who fails to produce her own 
deduction of A q) from V ^q) will not learn much from looking at the above solution. 


If we were to display a full sequence of steps leading to 

the creation of this deduction 

might write the following: 








1. (-’PV-.g) Prem 

1. 

i-P V -q) 

Prem 


1. 

(-P V ^q) 

Prem 


(pAq) 

Ass 


p--2. 

(pAg) 

Ass 







r-3. 

-P 

Ass 

-I 



VE 



5. 

_L 





-w 



f-e. 


Ass 







8 . 

_L 


10. ^(pAg) 

9. 

± 



9. 

_L 

l,3-5,6-8, VE 

10. 

AP A q) 

2-9,->! 


10. 

-(p A g) 

2-9, 
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1. 

(-^pV^q) 

Prem 

1. 

(-P V 

Prem 

1 - 2. 

(pAq) 

Ass 

1- 2. 

(pAq) 

Ass 


^3. 

-P 

Ass 


^3. 

-P 

Ass 


4. 

P 

2, AE 


4. 

P 

2, AE 


5. 

_L 

3,4,-iE -lE. AE 


5. 

_L 

3,4,^E 


f-e. 


Ass 


^6. 

-9 

Ass 






7. 

q 

2, AE 


s. 

_L 



8. 

_L 

6,7,^E 

1 9. 

_L 

1,3-5,6-8, VE 

9. 

_L 

' 1,3-5,6-8, VE 

10. 

-(P A q) 

■ 2-9, 

10. 

-(P A q) 

■ 2-9,-il 


This is much too cumbersome for practical use in textbooks, and leaves the assignment of 
line numbers somewhat mysterious. How to know the deduction will use ten lines? But a 
simple change in notation can help. Instead of numbering the lines of the deduction from 
top to bottom, we number them in the order they were created. The above sequence can 
then be represented with just one deduction, as shown: 


1. 

i^pV^q) 

Prem 

—3. 

(pAq) 

Ass 

^5. 


Ass 

9. 

P 

3,AE 

6. 

T 

5,9,^E 

^7. 


Ass 

10. 

q 

3,AE 

8. 

T 

7,10,^E 

4. 

T 

■ 1,5-6,7-8, VE 

2. 

ApAq) 

3-4, 


First, the premise and conclusion are written as lines 1 and 2, with a generous space between. 
We then apply to the conclusion to get a hypothetical deduction with assumption {p A q) 
on line 3 and conclusion T on line 4. Next, we apply VE to line 1 to get two nested 
hypothetical deductions, from on line 5 to T on line 6, and from on line 7 to T on 
line 8. The first of these is completed using to get p on line 9 (justified by AE from line 
3). The second is completed similarly, with line q on line 10. In this way, the line numbers 
match the order of construction of the deduction precisely, which is thereby emphasised to 
students as they create it. 

The discipline of numbering in the order a deduction is created helps students (and in¬ 
structors) to think strategically. The goal is to provide a justification for the conclusion 
given the resources in the premises, and seen this way deduction is just planning how to 
use the resources to satisfy a goal. While this is a familiar idea in automated reasoning 
research, it rarely enters the classroom. By using the above system of numbering, students 
cannot avoid thinking in this strategic way and learning that introduction rules serve to 
split the goal into subgoals, whereas elimination rules deploy resources. Strategic concepts 
such as back-tracking, management of decision points, and an awareness of risk are brought 
to the fore. Certain rules, such as Disjunction Introduction are seen as “choice rules" to be 
used with caution and postponed as long as possible, whereas others, such as Implication 
Introduction are “automatic" - they can and should be used immediately with no risk of 
having to undo. 

The use of a new notation has the disadvantage that teaching resources, especially solutions 
to exercises, have to be produced from scratch. And it was to aid in this that we decided to 
produce both a DTeX package for formatting our deductions easily, and a Java app to aid in 
the generation of both DTgX code and various other formats for classroom demonstration. 
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Natural Deduction Planner 

Efficiently creating large numbers of typeset sample deductions can be a daunting prospect. 
On pen and paper, even a challenging proof can be completed within minutes. However 
typesetting a proof in software such as HTgX requires a great deal more effort. With custom 
packages, structural features such as the scope lines used above can be automated well, but 
the task of inputting formulas is still cumbersome. Where the hand can draw any symbol at 
much the speed of any other, typesetting special characters often requires lengthy commands. 
We began development of a proof assistant software application with the primary goal of 
overcoming these difficulties, but the result is useful in many more ways than typesetting. 
We call the result the Natural Deduction Planner (NDP). It generates DTeX code for use 
with a custom package. 

Our interface essentially replicates the pen and paper proof process, using the same layout 
and notation of Gentzen’s system, as above. Users input sequents using a set of special 
characters available onscreen. No special formatting (such as prefix notation) is required 
- a correctly inputted sequent appears as it would on the page. A range of proof systems 
are available, such as NJ, NK and Peano Arithmetic. Proofs appear graphically onscreen 
exactly as they would be typeset. Initially, any premises appear at the top of the window, 
with a space before the conclusion. 

NDP is similar to the Proof Developer tool created by Daniel Velleman0 The interfaces are 
very alike, but where Proof Developer focusses on informal proof writing, NDP is concerned 
with formal deductions. Both approaches use ideas of strategy, goals and resources to 
conduct proofs. Another similar tool is PANDA, developed at the Institut de Recherche 
en Informatique de Toulouse PANDA uses a proof tree style, rather than the Fitch-style 
calculus implemented in NDP. 

At each stage of an NDP deduction, the user can apply any valid rules, and their outcome is 
immediately displayed. To apply a rule, a current goal must first be selected, which can be 
any unjustified line. Selecting a current goal allows any possible introduction rules for that 
line to be applied. Selecting a goal also allows a current resource to be selected, enabling 
its elimination rules. Even if the first step in the proof involves an elimination rule, the 
user must select a current goal. These explicit realisations of goal and resource help to 
reinforce the use of strategies in deductions. Rather than beginning with premises working 
downwards, the user is encouraged to begin at the bottom of the deduction (the goal) 
and efficiently choose those resources which are needed. By breaking from a strictly linear 
approach, selecting goals encourages users to consider which available rules are automatic, 
and which require choice. 

Lines are numbered in the order of creation, again reinforcing the way the deduction is 
constructed. This is also useful when reaching a dead-end in the proof - the user can see 
exactly how they reached this point, and what will happen when they retrace their steps. 
Highlighting is used to indicate the current goal and resource and also serves to indicate any 
lines out of scope of the goal. Once all lines have been justified the proof is complete. 


^ Proof Developer is a Java web applet built to accompany Velleman’s textbook “How to Prove It " mis] 
http://www.cs.amherst.edu/-djv/pd/pd.html 

^ PANDA is a Java application designed for teaching computer science students in logic, developed by 
Olivier Gasquet, Frangois Schwarzentruber, and Martin Strecker http://www.irit.fr/panda 
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M Figure 1 An incomplete proof showing current goal (green), current resource (red) and possible 
rules (AE). All NK rules are available, but currently only NJ rules have been used. 


By automating the writing of each proof line, users are able to move through deductions 
faster, focussing more on the strategy involved. Speed and the ability to easily “undo” 
mistakes also removes hurdles from the bulk trial and error method of learning strategy. 
A student unsure of the next step in a complicated pen and paper proof may be overly 
wary - a wrong move would result in writing out the whole proof again. On NDP, however, 
she can chose a rule in the knowledge that the current proof state can easily be retrieved. 
Similarly, students sometimes find rules like disjunction elimination, which requires creating 
four new lines and two scopes, to be intimidating and tiresome. Yet disjunction elimination 
is an automatic rule and should be applied as quickly as possible. In NDP disjunction 
elimination is achieved with two clicks, a less daunting task. 

A Rule Palette allows individual rules to be (de)activated independently of the proof system 
chosen. The rule palette’s layout shows the symmetry of Gentzen’s rules, and gives some 
indication as to how the rules fit into different logical systems. By only activating certain 
rules, students can complete exercises in subsets of a system before being introduced to it 
fully, and see where certain rules are needed. For example, the rule palette can be used to 
demonstrate the importance of double negation elimination in NK, by attempting a proof 
of {p V ^p) without double negation elimination to see how far it goes. Once we get stuck, 
we turn on double negation elimination to finish the proof. Users can try out their own 
systems too, to see how different rules interact with each other. 

Upon finishing a proof, it can be saved as either an editable proof or a demonstration proof. 
A demonstration proof has interaction disabled, providing a means to follow through an 
already complete proof. This is essentially the step by step deduction given above but in 
electronic form. Editable proofs behave similarly, but allow a user to take over the proof 
at any point. No work further than completing the deduction is required to generate these. 
Proofs can also be exported to Unicode format and as an image. Complete proofs can also 
easily be animated in .gif format, for use in slides or online. A primary feature of NDP is 
its ability to export proofs to DTeX code. This interacts with a DTeX package (based on 
TifcZ) which generates nicely typeset deductions. The task of producing exercises and their 
solutions involves little more than completing deductions on NDP - no fiddling about with 
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alignment or trying to recall commands required. 

We have used NDP as part of a course teaching natural deduction strategies. All the 
deduction exercises for the course were generated by the software, and it was also made 
available for students to download. Many students did so, and used NDP to complete 
exercises and study for tests. We released exercise solutions both as text documents and 
editable proof files. A novel use NDP was put to was in catching up on missed lectures. 
Since NDP applies each rule correctly, by studying what happens students could learn the 
rule themselves. While the motivation and strategy discussed in lectures was absent here, 
the correct manipulation of the formula was learned. NDP’s automated rule application had 
some downsides though. Some students found overuse of NDP resulted in over reliance - 
you don’t have to remember how to set out implication introduction if the software does it 
for you. Since tests were by pen and paper, this proved problematic. The best combination 
seemed to be use of pen and paper to practise rules, and NDP to practise strategy. 

In the context of tutorials, NDP allowed for greater flexibility in presentation. Again due to 
“undo” it was easier to recover from bad choices, encouraging student participation. Also, a 
source of potentially confusing transcription errors - the tutor’s handwriting - was removed. 
In one on one situations, NDP allowed for a greater flow of conversation. Discussed strategies 
for stuck proofs could be implemented quickly and results considered in much less time than 
would be required to write 10 lines of formulas by hand. 

Though originally intended to cover only propositional and predicate logic and Peano Arith¬ 
metic, we have begun extending NDP to cover other logics, and to consider new features. 
We’ve implemented a system of modal logic and hybrid logic using a labelled deduction 
method. These rules are available in the standard rule palette but are not thoroughly 
tested. A very rudimentary second order logic is also available, easily implemented due to 
Java seeing no distinction between predicate and variable symbols when making substitu¬ 
tions. In an attempt to automate the proof process, a Magic Mode is provided. This applies 
any rules which require no extra input for up to 10 iterations. In exceptional circumstances 
Magic Mode can complete proofs, but in general will only move forward one or two steps. 
Finally, a method to include custom axioms has been implemented. 

2.1 Implementation 

NDP was implemented in Java using the Swing and SwingX graphical user interface libraries. 
The code was written to be extendable and with a goal of modularity, to allow different 
interfaces to interact with the same backend. 

Formulas are held as strings in a macro format, using prefix notation for easier argument 
parsing. This also simplifies the process of exporting proofs to DTgX code. Each line of a 
proof is an NDLine object, which contains information such as the formula, the line number 
and the justification. 

A ProofMethods class forms the core of the program. This holds the current proof state as 
an array of NDLines. The application of a rule results in a relevant modification of the proof 
array and any lines within it. Rules themselves are methods within the ProofMethods class, 
and the system can be extended by adding new methods to give new rules. In practice, 
this means that additional rules (such as Disjunctive Syllogism) or extensions to the system 
can be added fairly easily. ProofMethods is designed to be as self-contained as possible; 
methods for printing the proof array to the command line mean it could be used without a 
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graphical interface. This is how early development proceeded. 

On top of ProofMethods sits the ProofPanel class, a modified JPanel which provides 
user interaction with ProofMethods. ProofPanel interprets the proof array and arranges 
the deduction onscreen. The function of the rule palette is implemented entirely within the 
ProofPanel. If conjunction introduction (Al) is turned off then the option to apply that rule 
becomes unavailable on the ProofPanel. That is, even with Al “disabled” ProofMethods 
is still able to apply that rule - there is just no way for the command to do so to reach it. 
The rule palette makes extensive use of the SwingX library. 

A modified JFrame constitutes the main window of the Proof Assistant and controls tasks 
such as New Proof, Save, Open and Export. Proofs are saved in plain text files which contain 
complete undo histories and settings profiles. There is no difference between .ndp (editable) 
and . ndu (demonstration) files - they are read in differently but their contents are identical. 

NDP is available on SourceForge at http;//sourceforge. net/p/proof assistant/ 
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